Rummy Connect Privacy Policy

At Rummy Connect, we believe the magic of card games goes beyond the shuffle of a deck  it’s about building genuine connections in a space you can trust. Protecting your privacy and personal data is central to that trust. This Privacy Policy explains how [Rummy Games] (“Rummy Connect,” “we,” “us,” or “our“), operating from Goa, India, collects, uses, stores, shares, and protects your information when you access our website, mobile application, and online rummy services (collectively, the “Platform“).

This Policy is published in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (as amended in 2023 for online real-money games), and the Digital Personal Data Protection Act, 2023, to the extent notified and in force. This Policy should be read alongside our Terms and Conditions and Disclaimer.

By registering on, accessing, or using Rummy Connect, you consent to the collection, processing, and disclosure of your information as described in this Policy.

1. Information We Collect

To provide a seamless, fair, and secure gaming experience, and to meet our legal obligations as an online gaming intermediary, we collect the following categories of information:

a) Account & Identity (KYC) Data: Full name, date of birth, gender, email address, mobile number, and government-issued identity proof (PAN, Aadhaar masked/last-4-digits, or equivalent), collected at registration and prior to enabling cash gameplay, deposits, or withdrawals, in line with Know Your Customer (KYC) norms applicable to online gaming intermediaries under the IT Rules, 2021 (as amended) and the Prevention of Money Laundering Act, 2002.

b) Financial & Transactional Data: Bank account details, UPI ID, card details (tokenised, never stored in raw form on our servers), deposit and withdrawal history, and coin-purchase records, processed through PCI-DSS compliant, RBI-authorised payment gateway partners.

c) Gameplay & Behavioural Data: Game history, table activity, chip/coin balances, session duration, in-game chat or voice-chat interactions (where used), and patterns monitored for anti-fraud, anti-collusion, and fair-play enforcement.

d) Technical & Device Data: IP address, device ID, browser/user-agent string, operating system, app version, and geo-location data (used to verify eligibility and restrict access from states where real-money rummy is not permitted).

e) Communications Data: Correspondence with our support/grievance team, survey responses, and feedback shared via email, phone, or in-app chat.

f) Cookies & Site Interaction Data: As detailed in Section 3 below.

We collect only what is necessary to operate the Platform lawfully, securely, and fairly – we do not collect sensitive personal data beyond what is required for KYC, AML, and regulatory compliance.

2. How We Use Your Information

Your information is used strictly for legitimate, disclosed purposes, including to:

• Verify your age (18+) and identity, and confirm your eligibility to play, in accordance with applicable state-level restrictions.
• Process deposits, withdrawals, coin purchases, and statutory TDS deduction under Section 194BA of the Income Tax Act, 1961.
• Detect, investigate, and prevent fraud, collusion, multiple-accounting, bots, and money laundering.
• Enable core gameplay features, including table-matching, leaderboards, and voice/text chat where opted in.
• Send transactional communications (OTPs, account alerts, withdrawal confirmations) and, where consented, promotional communications.
• Respond to support queries and resolve grievances.
• Comply with requests from courts, law-enforcement, tax, or regulatory authorities.
• Improve Platform security, stability, and user experience through aggregated, anonymised analytics.

We do not use your KYC or financial data for any purpose beyond gaming operations, regulatory compliance, and fraud prevention, and we do not build advertising profiles from your financial or gameplay data for sale to third parties.

3. Cookies and Tracking Technologies

We use cookies and similar technologies to secure your session and improve your experience:

• Essential/Login Cookies: Maintain your logged-in session; login cookies typically last 2 days (up to 2 weeks with “Remember Me” selected).
• Preference Cookies: Store display and comment preferences for up to one year.
• Analytics Cookies: Help us understand aggregate usage patterns to improve app performance; this data is anonymised where possible.
• Security Cookies: Support fraud detection, bot prevention, and multi-account checks.

You can control or disable cookies through your browser/device settings; note that disabling essential cookies may affect your ability to log in or play.

4. Embedded and Third-Party Content

Pages on our website (such as blog articles) may include embedded content – videos, images, or social widgets from third-party platforms. Such embedded content behaves as if you visited that third-party site directly, and that third party may independently collect data, set cookies, or track your interaction. We encourage you to review the privacy policies of such third-party providers.

5. How We Share Your Information

We do not sell your personal data. We share information only where necessary and with appropriate safeguards, including with:

• Payment Gateways & Banking Partners: RBI-regulated/PCI-DSS compliant processors, to complete deposits, withdrawals, and refunds.
• KYC & Identity Verification Partners: For identity, age, and address verification as mandated under applicable online-gaming and AML regulations.
• Security & Anti-Fraud Service Providers: To detect collusion, bots, chip-dumping, and suspicious transaction patterns.
• Cloud Hosting & Infrastructure Providers: Operating under contractual confidentiality and data-security obligations, with servers/backups located in accordance with applicable data-localisation expectations.
• Legal & Regulatory Authorities: Courts, law-enforcement, tax authorities, or self-regulatory bodies (SRBs) recognised under the IT Rules, where disclosure is required by law, a valid legal process, or to protect the rights, property, or safety of Rummy Connect, our users, or the public.
• Password Reset Emails: Your IP address is included in password-reset emails as a standard security measure.

Any third party engaged by us is contractually bound to use your data solely for the specified purpose and to maintain confidentiality and security consistent with this Policy.

6. Cross-Border Data Transfer

Where any data processing occurs outside India (for example, through cloud infrastructure providers), we ensure such transfers are made only to service providers that maintain security and confidentiality standards consistent with Indian law, and, where applicable, in line with the transfer restrictions under the Digital Personal Data Protection Act, 2023.

7. Data Retention

• KYC, Transaction, and AML Records: Retained for the period mandated under the Prevention of Money Laundering Act, 2002 and applicable income-tax/TDS record-keeping requirements (generally a minimum of five years from the date of transaction, or longer if required by law or an ongoing legal proceeding).
• Account & Gameplay Data: Retained for as long as your account remains active, and for a reasonable period thereafter to resolve disputes, enforce our Terms, and meet legal obligations.
• Comments & Support Correspondence: Retained to recognise and manage follow-up interactions.
• Upon account closure, we delete or anonymise personal data that is no longer required, except where retention is legally mandated (e.g., KYC and financial records).
  
  

8. Data Security

We implement reasonable security practices and procedures as mandated under the IT Rules, 2011, including:

• Encryption of sensitive data in transit (TLS/SSL) and, where applicable, at rest.
• Tokenisation of card data; we do not store raw card numbers on our servers.
• Role-based access controls limiting internal access to personal data on a need-to-know basis.
• Regular security reviews, monitoring, and fraud-detection systems.
• OTP-based and multi-factor verification for sensitive account actions.

While we work to protect your data using industry-standard safeguards, no method of transmission or storage is 100% secure, and we encourage you to also protect your own credentials and devices.

9. Children’s Privacy

Rummy Connect is strictly intended for users 18 years of age and older. We do not knowingly collect personal data from minors. If we become aware that a minor has registered or provided personal data, we will promptly suspend the account and delete the associated data, subject to any legally mandated retention.

10. Your Rights Over Your Data

You have the following rights regarding your personal data, consistent with applicable Indian data-protection law:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Update or correct inaccurate account information.
• Right to Erasure: Request deletion of your personal data, subject to data we are legally required to retain (such as KYC and financial/AML records).
• Right to Withdraw Consent: Withdraw consent for optional processing (e.g., promotional communications) at any time, without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Grievance Redressal: Raise concerns about how your data is handled with our Grievance Officer (see Section 12).

To exercise these rights, write to us at info@rummyconnect.com with your registered account details. We will respond within a reasonable time and, in any event, within the timelines prescribed under applicable law.

11. Your Consent

By registering for and using Rummy Connect, you consent to the collection, use, storage, and disclosure of your information as set out in this Policy. Where processing relies on your specific consent (for example, marketing communications or optional data fields), you may withdraw that consent at any time by contacting us, without affecting services that require mandatory data (such as KYC) to function.

12. Grievance Officer

In accordance with Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and applicable data-protection law, you may direct privacy-related grievances to:

Grievance Officer
Email: grievance@rummyconnect.com
Address: Goa, India
Response Timeline: Acknowledgement within 24 hours; resolution within 15 days.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. Material changes will be notified via the Platform or registered email/SMS. The “Effective Date” at the top of this page indicates when this Policy was last revised. Continued use of the Platform after such updates constitutes acceptance of the revised Policy.

14. Governing Law

This Privacy Policy is governed by the laws of India, and any disputes relating to it shall be subject to the exclusive jurisdiction of the competent courts at Goa, India, consistent with our Terms and Conditions.

Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or your personal data, please reach out:

• Phone: +91 95152 78888
• Email: info@rummyconnect.com
• Address: Goa, India

Our support team is available Monday–Friday, 8:00 AM–8:00 PM, and Saturday–Sunday, 9:30 AM–6:30 PM IST.